Skip to content

[C] Hub renewal stores provider-made certificates; harden managed provider storage #287

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
Ewerton Scaboro da Silva (ewertons) wants to merge 19 commits into from
+2,244 −390
Closed

[C] Hub renewal stores provider-made certificates; harden managed provider storage #287

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
19 commits
Select commit Hold shift + click to select a range
8ced238
[C] Store hub-issued certificates and report store results
Copilot Sep 28, 2026
b11b689
[C] Managed provider: key-match check, owner-only atomic writes
Copilot Sep 28, 2026
4142e0e
[C] Managed provider test: exclude the real files from the Windows te…
Copilot Sep 28, 2026
080fbba
[C] Hub renewal: the key owner owns the chain
Copilot Sep 28, 2026
a0ab0d8
[C] Validate the whole issued chain; size-stamp the CSR event
Copilot Sep 28, 2026
bfd45d8
[C] Gate the DPS store hook on the provider vtable version; fix cover…
Copilot Sep 28, 2026
0a9645b
[C] Sample provider: all-or-nothing store; sync design doc
Copilot Sep 29, 2026
b7bd578
Merge branch 'main' into feature/c-use-issued-certificates
ewertons Sep 29, 2026
02d28fe
[C] Refuse empty chain entries; keep the op-cert callback captured
Copilot Sep 29, 2026
9d26f1a
[C] Coverage doc: re-point anchors into the changed test files
Copilot Sep 29, 2026
104e6e6
[C] Managed provider: exact 0600 files; refuse text outside the chain
Copilot Sep 29, 2026
71fe6aa
Merge branch 'main' into feature/c-use-issued-certificates
ewertons Sep 29, 2026
697b484
[C] Require the provider to store DPS-issued chains; Windows DACL test
Copilot Sep 29, 2026
df3b8eb
[C] Drop certificate provider vtable versioning; fix MSVC test build
Copilot Sep 29, 2026
df83556
[C] Bound the persisted chain read; sample refuses empty entries
Copilot Sep 29, 2026
6ab7665
[C] Managed provider: refuse storing a chain over 64 KiB
Copilot Sep 29, 2026
1109bb6
[C] Split the persisted-chain size test in two
Copilot Sep 29, 2026
e4b2ba0
[C] Managed provider: size each issued entry before decoding it
Copilot Sep 29, 2026
9b208e2
[C] Store an issued chain only from a complete JSON response
Copilot Sep 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions c/adapters/cert_openssl/CMakeLists.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,5 +40,9 @@ target_link_libraries(az_iot_certificate_provider_managed
PRIVATE
OpenSSL::Crypto
)
if(WIN32)
# ConvertStringSecurityDescriptorToSecurityDescriptorA (owner-only files).
target_link_libraries(az_iot_certificate_provider_managed PRIVATE advapi32)
endif()
az_iot_apply_warnings(az_iot_certificate_provider_managed)
az_iot_apply_coverage(az_iot_certificate_provider_managed)
Loading
Loading